2 matches found
CVE-2026-54617
GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote actor can send a raw HTTP request target without a leading slash to the default LaunchServer file server on port 9274. FileServerHandler.channelRead0 in...
9.8CVSS0.00677EPSS
SaveExploits0References3
CVE-2026-54617 GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandler
GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. Prior to 5.7.12, an unauthenticated remote actor can send a raw HTTP request target without a leading slash to the default LaunchServer file server on port 9274. FileServerHandler.channelRead0 in...
9.8CVSS
SaveExploits0References5
20